Abstract: A traceback solution is provided. For a network of autonomous systems, the traceback solution traces the autonomous system path taken by traffic flows. Every link in the traceback path is created, verified, and audited by autonomous systems. Multiple autonomous systems may take part in the process, making the system robust against fake information. The database used to store the validated traceback paths is a decentralized and distributed storage. Multiple copies of the database may be maintained by the network of autonomous systems. The database may be accessible by any participating autonomous system; and is not accessible from outside the network of autonomous systems. The traceback solution achieves both validation and non-repudiation property among the ASes. The traceback solution mitigates some important attack scenarios that might be targeted specifically at the traceback solution.

Abstract: A method and an apparatus for generating cover images for steganography are provided. The steganographic framework is designed based on an image generation system. The apparatus may encode a message to obtain a binary sequence. The apparatus may obtain a plurality of binary segments of a particular length based on the binary sequence. For each binary segment of the plurality of binary segments, the apparatus may select an image of a semantic content (e.g., a numeral digit) from a dictionary of images of random semantic contents (e.g., random numeral digits) based on the binary segment. The apparatus may combine the selected images to form at least a portion of a cover image denoting a combination of the semantic contents of the selected images (e.g., a plurality of numeral digits).

Abstract: A traceback solution is provided. For a network of autonomous systems, the traceback solution traces the autonomous system path taken by traffic flows. Every link in the traceback path is created, verified, and audited by autonomous systems. Multiple autonomous systems may take part in the process, making the system robust against fake information. The database used to store the validated traceback paths is a decentralized and distributed storage. Multiple copies of the database may be maintained by the network of autonomous systems. The database may be accessible by any participating autonomous system; and is not accessible from outside the network of autonomous systems. The traceback solution achieves both validation and non-repudiation property among the ASes. The traceback solution mitigates some important attack scenarios that might be targeted specifically at the traceback solution.

Abstract: A method, a computer-readable medium, and an apparatus for IP traceback are provided. The apparatus may generate a group public key shared by a plurality of routers controlled by a service provider. The apparatus may generate a unique private signing key for a router of the plurality of routers. The private signing key may be used to generate a group signature for a session of network traffic. The group public key may be applied to the group signature to identify the service provider. The apparatus may identify the router by applying the group public key and a master secret key to the group signature. The apparatus may deploy preventive or mitigate action on the identified router.

Abstract: A method of selecting a local mobility agent (LMA) from several LMAs in a visited domain, to serve as a local home agent, for registration with a home agent in a home domain of a mobile host is disclosed. The method includes determining a mobility pattern of the mobile host within the visited domain in a given time interval and selecting a LMA from the several LMAs at the end of the time interval depending on the mobility pattern of the mobile host. The selected LMA is registered with the home agent if the selected LMA is different from a LMA currently registered with the home agent. A system, subsystem and a mobile host that perform the above-described method are also disclosed.